Strange triple firewall events

[Rolf Jürrens <security () rolf-juerrens de>]

Hi everyone,

on our firewalls I saw some strange events - exactly three packets arrive at the same time (ip adresses changed):

1. 192.168.10.1 -> 192.168.20.1:37852/udp
2. 192.168.10.1 -> 192.168.20.1:echo request/icmp 
3. 192.168.10.1:80 -> 192.168.20.1:443/tcp

One occurence of such an event could be by hazard, but I saw more events from different locations in the internet. Is 
it a special program wich shows such a fingerprint?

Thanks for your help!

Greetings

Rolf
________________________________________________________________
Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr! 
Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13